Fix for an Issue #137

plugins/generic/custom.py

@@ -34,7 +34,6 @@ class Custom:
         output = None
         sqlType = None
         query = query.rstrip(';')
-        kb.unescape = False
 
         for sqlTitle, sqlStatements in SQL_STATEMENTS.items():
             for sqlStatement in sqlStatements:
@@ -47,7 +46,6 @@ class Custom:
             logger.info(infoMsg)
 
             output = inject.getValue(query, fromUser=True)
-            kb.unescape = True
 
             return output
         elif not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
@@ -55,8 +53,6 @@ class Custom:
                 warnMsg += "available when stacked queries are supported"
                 logger.warn(warnMsg)
 
-                kb.unescape = True
-
                 return None
         else:
             if sqlType:
@@ -72,8 +68,6 @@ class Custom:
 
             output = False
 
-        kb.unescape = True
-
         return output
 
     def sqlShell(self):